gk777 Privacy Policy

Section 1Scope and Application

This Privacy Policy applies to all personal data collected, processed, and stored by gk777 in connection with the operation of the gk777 platform at gk777.im (hereinafter "the Platform"). It covers all individuals who visit, register on, or interact with the Platform, including registered Players, prospective Players, and visitors who browse without registering.

By accessing the Platform or creating a gk777 account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not consent to these practices, you should not register an account or continue using the Platform.

This Policy should be read alongside gk777's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between this Privacy Policy and those documents on a privacy-related matter, this Privacy Policy governs.

Section 2Data Controller Information

For the purposes of this Privacy Policy, the data controller responsible for your personal data is gk777, operating the Platform at gk777.im. As data controller, gk777 determines the purposes and means by which your personal data is processed.

If you have any questions about how gk777 handles your personal data, or wish to exercise any of the rights described in Section 9, please contact our Data Support team using the details provided in Section 14 of this document.

Section 3Personal Data We Collect

gk777 collects the following categories of personal data from Players and Platform visitors:

gk777 does not intentionally collect special category data (as defined under relevant data protection frameworks) such as health data, biometric data used for identification purposes, racial or ethnic origin, political opinions, or religious beliefs. If any such data is inadvertently submitted — for example, within a support message — it will be deleted promptly upon identification.

Section 4How We Collect Your Data

gk777 collects personal data through the following channels:

• Direct submission: Data you provide when creating your account, completing verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access or use the Platform, via server logs, session tracking, and similar technologies as described in Section 8.
• Payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Visa, Mastercard, and cryptocurrency processors when you initiate a deposit or withdrawal.
• Identity verification partners: Verification results and document authentication outcomes received from third-party KYC (Know Your Customer) service providers when we conduct identity checks.
• Fraud prevention and AML tools: Signals and risk scores received from anti-money laundering and fraud detection partners to help identify prohibited conduct as described in the Terms & Conditions.
• Game providers: Aggregated game activity data received from studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, used to reconcile game results and resolve disputes.

Section 5Legal Basis for Processing

gk777 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to create and maintain your gk777 account, process deposits and withdrawals, pay out winnings, and provide the gaming and betting services you have requested.
• Legal obligation: Processing required to comply with applicable law, including anti-money laundering (AML) obligations, age verification requirements, fraud reporting, and record-keeping requirements.
• Legitimate interests: Processing carried out in the pursuit of gk777's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and analytics — where those interests are not overridden by your privacy rights.
• Consent: Where gk777 relies on your consent as a legal basis, you will be clearly informed at the point of data collection. You have the right to withdraw consent at any time; withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

Section 6How We Use Your Personal Data

gk777 uses the personal data it collects for the following purposes:

• Account creation and management: Setting up, verifying, and maintaining your gk777 account, including enforcing the one-account policy and the 21+ age restriction.
• Payment processing: Facilitating deposits via bKash, Nagad, Rocket, Upay, Visa, Mastercard, USDT, and Bitcoin, and processing withdrawal requests back to your verified payment method.
• Identity and age verification: Confirming that you are who you claim to be and that you meet the minimum age requirement of 21 years, in compliance with the Terms & Conditions.
• Customer support: Responding to inquiries, resolving disputes, and providing assistance via live chat and email at [email protected].
• Security and fraud prevention: Detecting, investigating, and preventing unauthorised account access, fraudulent transactions, AML violations, and other prohibited conduct.
• Responsible gaming: Monitoring Player activity to identify signs of problem gambling, enforcing deposit limits and self-exclusion settings configured by the Player, and flagging accounts for review where harmful patterns are detected.
• Platform improvement: Analysing aggregated usage data to improve game offerings, navigation, loading speeds, and the overall Player experience for Bangladesh users.
• Legal compliance and record-keeping: Retaining transaction records, identity documents, and account history for the periods required by applicable law and internal audit purposes.
• Promotional communications: Where you have consented to receive marketing communications, sending you information about gk777 promotions, bonus offers, BPL and IPL cricket betting markets, and other relevant updates. You may opt out at any time by contacting support.

Section 7Sharing Your Personal Data

gk777 does not sell your personal data to any third party. We share personal data only in the following defined circumstances, and only to the extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and cryptocurrency payment partners receive the transaction data necessary to process your deposits and withdrawals. Each partner is subject to its own privacy policy for data it independently controls.
• Identity verification providers: Third-party KYC service providers receive copies of identity documents and verification instructions when an identity check is triggered. Results are returned to gk777; the provider retains data only as required by its own legal obligations.
• Fraud prevention and AML partners: Anonymised or pseudonymised transaction and behavioural signals may be shared with fraud detection and AML compliance services to generate risk assessments. These partners are contractually prohibited from using the data for any other purpose.
• Game studios: Providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a session token and game activity data necessary to run games within the Platform. Game studios do not receive your full identity data.
• Legal and regulatory authorities: gk777 may disclose personal data to law enforcement, regulatory bodies, or courts where required by law, where necessary to protect the rights and safety of gk777 or its Players, or where required as part of a fraud or AML investigation.
• Business transfers: In the event of a merger, acquisition, or sale of the Platform, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and of any change in the data controller's identity before the transfer takes effect.

Section 8Cookies and Tracking Technologies

gk777 uses cookies and similar tracking technologies on the Platform to ensure functionality, improve performance, and — where consent has been obtained — to understand how Players interact with the site. The following categories of cookies may be set:

You may manage cookie preferences through your browser settings at any time. Blocking strictly necessary cookies may impair Platform functionality. For analytics cookies, you may also withdraw consent by contacting the support team. Note that gk777 does not use cookies for third-party advertising or cross-site tracking.

Section 9Your Data Rights

Subject to applicable law and certain limitations, you have the following rights in relation to the personal data gk777 holds about you:

• Right of Access: You may request a copy of the personal data gk777 holds about you, including the categories of data, the purposes for which it is processed, and any third parties with whom it has been shared.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. For account details such as your name or contact number, you may also update these directly from within your account dashboard.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where processing was unlawful. This right is subject to overriding legal retention obligations — gk777 may be required to retain certain transaction and identity records for defined periods regardless of an erasure request.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Restrict Processing: You may request that gk777 restrict processing of your data in certain circumstances, such as while a rectification request is being reviewed, or where you contest the legal basis for processing.
• Right to Object: Where gk777 processes your data on the basis of legitimate interests, you have the right to object to that processing. gk777 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where gk777 relies on your consent as the legal basis for processing, you may withdraw that consent at any time. Withdrawal does not affect processing that has already taken place.

How to exercise your rights: Submit your request in writing to [email protected] with the subject line "Privacy Request" and specify clearly which right you are exercising and the data concerned. gk777 will acknowledge your request within 5 Business Days and provide a substantive response within 30 days of receipt. Where a request is complex or numerous, this period may be extended by a further 30 days with prior notification.

Section 10Data Retention

gk777 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Anonymised data may be retained indefinitely for statistical and analytical purposes, as it can no longer be linked to any individual.

Section 11Security Measures

gk777 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, or destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your browser or mobile device and gk777.im is encrypted in transit using SSL/TLS protocols. This applies to login, deposits, withdrawals, and all account interactions.
• Encrypted data storage: Sensitive data — including payment account references and identity document copies — is stored in encrypted form at rest on gk777's secure servers.
• Access controls: Access to personal data within gk777 is restricted on a need-to-know basis. Staff members are granted only the access levels required for their specific role, and all access is logged and subject to audit.
• Two-factor authentication: gk777 supports two-factor authentication (2FA) for Player accounts and requires it for internal staff access to systems containing personal data.
• Penetration testing and vulnerability management: The Platform undergoes regular security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: gk777 maintains a documented security incident response procedure. In the event of a data breach that is likely to result in risk to Players, gk777 will notify affected individuals and relevant authorities within the timeframes required by applicable law.

Section 12Children and Minors

The gk777 Platform is intended exclusively for adults aged 21 years and over. gk777 does not knowingly collect personal data from individuals under the age of 21. The Platform's registration flow includes an age declaration step, and gk777 reserves the right to request proof of age at any point during the account lifecycle.

If gk777 discovers that personal data has been collected from an individual who is under 21 years of age — whether through self-disclosure, a complaint, or our own checks — the account will be immediately suspended, the data will be securely deleted in accordance with our legal obligations, and any funds held will be dealt with in accordance with the Terms & Conditions.

Section 13Changes to This Privacy Policy

gk777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. When material changes are made, the updated Policy will be published on this page with a revised effective date prominently displayed at the top.

For significant changes that materially affect how we use your personal data, gk777 will provide advance notice via email to the address registered on your account, or via an in-Platform notification visible on your next login. Where required by law, we will seek fresh consent before applying new processing activities to your existing data.

Your continued use of the Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised version. If you do not agree with any change, you should cease using the Platform and may request account closure as described in the Terms & Conditions .

The current version of this Privacy Policy is always available at gk777.im/privacy-policy. We recommend that you review this page periodically to stay informed of how gk777 protects your personal data.

Section 14Contact and Data Requests

For any privacy-related questions, concerns, or to exercise any of the data rights described in Section 9, please contact the gk777 Data Support team using the following details:

• Email: [email protected] — use subject line "Privacy Request"
• Live Chat: Available 24/7 directly on the Platform after login
• Response time: Acknowledgement within 5 Business Days; full response within 30 days

When submitting a privacy request by email, please include your registered account username or email address, a clear description of your request, and — for erasure or portability requests — confirmation of your identity as described in Section 9. This enables gk777 to locate your records and process your request without unnecessary delay.

gk777 is committed to resolving all privacy concerns directly and in good faith. If you are not satisfied with the response to a privacy request, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.